[Snort-users] Getting One instance of snort to sniff 2 interfaces

Fyodor fygrave at ...121...
Tue May 1 12:38:49 EDT 2001


On Mon, Apr 30, 2001 at 03:56:10PM -0700, Erek Adams wrote:
> On Mon, 30 Apr 2001, Josh Oshiro wrote:
> 
> > Set the network interface to "any". this only works with recent versions
> > of libpcap.
> 
> Don't forget the other important part...  Linux Only.  Damn those penguins!
> ;-)
> 

and linux kernel 2.2 and up in fact :) (does 2.1 have linux packet filter too? :))





More information about the Snort-users mailing list